780th Military Intelligence Brigade (Cyber)

"Ubique Et Semper In Pugna" latin for "Everywhere and always fighting" – We don't talk about what we do nor who we are in a cyber 'knife fight' with; however we are "Everywhere and Always...In the Fight!" We are the only offensive cyberspace operations brigade in the U.S. Army.

"All gave some; some gave all."

Iranian threat actor #NimbusManticore rapidly developed its tooling, introducing the AI-assisted MiniFast backdoor and new delivery methods including trojanized software and SEO-poisoned sites. Read More --> research.checkpoint.com/2026/fast-and-…

Analyzing Void Dokkaebi’s Cython-Compiled InvisibleFerret Malware Void Dokkaebi, a North Korea-aligned intrusion set, has updated its information-stealing malware, InvisibleFerret Trend Micro trendmicro.com/en_us/research… @trendaisecurity

Introducing Showboat: A new malware family taunts defenses and targets international telecom firms Multiple threat clusters aligned with the People’s Republic of China (PRC) have been observed using the same post-exploitation frameworks and techniques Black Lotus Labs | Lumen lumen.com/blog/en-us/int… @lumentechco

How China-linked threat actors obtain zero-day vulnerabilities Barracuda blog.barracuda.com/2026/05/21/chi… @barracuda

New Chinese surveillance leaves foreigners nowhere to hide A Chinese cybersecurity expert has revealed to DW details of China's new high-tech policing. Deutsche Welle dw.com/en/new-chinese… @dwnews

Russian researcher claims state-backed MAX app secretly records users and monitors VPNs Tech Radar techradar.com/vpn/vpn-privac… @techradar

Middle East Malicious Infrastructure Report: 1,350+ C2 Servers Mapped Across 98 Providers Iranian-nexus actors have been caught staging operations weeks before activation Hunt.io hunt.io/blog/middle-ea… @Huntio

Iran Moved Billions Through Binance to Fund Regime—Continuing Into This Month The Wall Street Journal wsj.com/world/middle-e… @WSJ

Hijacked npm Package Attempts to Deliver PolinRider-Linked RAT Sonatype believes these packages are associated with PolinRider, an Advanced Persistent Threat (APT) group linked with North Korea. sonatype.com/blog/hijacked-… @sonatype

The Federal Bureau of Investigation is releasing this FLASH to disseminate indicators of compromise (IOCs) and identified tactics, techniques, and procedures associated with the First VPN Service. ic3.gov/CSA/2026/26052… @FBI

Cybercriminal VPN used by ransomware actors dismantled in global crackdown Europol europol.europa.eu/media-press/ne… @Europol

Threat Intelligence Report: ZionSiphon OT Malware First Attempts? Psyops? Both? Attribution remains unconfirmed. The available evidence supports a plausible Iranian nexus DomainTools Investigations dti.domaintools.com/research/threa… @DomainTools

Intelligence Specialist (Operations Support) GG-13 | DEPARTMENT OF THE ARMY | U.S. Army Intelligence and Security Command (INSCOM) | This position is with Detachment Hawaii, 782nd Military Intelligence Battalion (Cyber), 780th Military Intelligence Brigade (Cyber) in Kunia, Hawaii. Open: May 22 to 29, 2026, usajobs.gov/job/868870300. #ArmyPossibilities #ArmyCyber @ARCYBER

I encourage you to join me at 3:00 p.m. local time on Memorial Day to observe the National Moment of Remembrance. Across the country, Americans will pause together in silence or prayer to honor the fallen.

Monday, May 25, 2026, is Memorial Day. A time to remember and honor the men and women who gave their lives in service to our nation. On this day, we pause to reflect on their sacrifice and to pay tribute to our fallen comrades. "All gave some; some gave all"

A solo Russian-speaking threat actor (tracked as “bandcampro”) ran a 5-year MAGA-themed Telegram channel (@americanpatriotus, approximately 17,000 subscribers) and pivoted to AI-automated content, fraud, and credential theft Trend Micro trendmicro.com/en_us/research… @trendaisecurity

ESET researchers analyzed the 2025 activity of Webworm, a China-aligned APT group that started out targeting organizations in Asia, but has recently shifted its focus to Europe. welivesecurity.com/en/eset-resear… @ESETresearch

These sanctions target Amin Exchange, a major Iranian currency exchange house that operates through a network of front companies in the United Arab Emirates, Turkey, and China, including Hong Kong, to launder money for sanctioned Iranian banks and state-owned enterprises.

United States Sanctions Iranian Financial and Shipping Networks U.S. Department of State state.gov/releases/offic… @StateDept